hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 03:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

add taint step through the cli-color library

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-06-22 23:10:40 +02:00
parent ec9c885908
commit 35c513d38a
4 changed files with 79 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
javascript/ql/src/semmle/javascript/frameworks/Logging.qll
View File

@@ -266,3 +266,15 @@ class CliHighlightStep extends TaintTracking::SharedTaintStep {
)
}
}
/**
* A step through the [`cli-color`](https://npmjs.org/package/cli-color) library.
*/
class CliColorStep extends TaintTracking::SharedTaintStep {
override predicate stringManipulationStep(DataFlow::Node pred, DataFlow::Node succ) {
exists(API::CallNode call | call = API::moduleImport("cli-color").getAMember*().getACall() |
pred = call.getArgument(0) and
succ = call
)
}
}